1. Attackers are actively exploiting CVE-2026-85097, a CVSS 10.0 flaw in the Bricksforge WordPress plugin, allowing unauthenticated remote code execution via arbitrary PHP file uploads (thehackernews.com).
2. A campaign named CyberXero, using Anthropic Claude Code and Cobalt Strike, stole over 628,000 Ukrainian records from WordPress sites and critical infrastructure entities (thehackernews.com).
3. Nippon Columbia malware incident exposed over 8.6 million karaoke fan records, affecting customers and employees of Japanese entertainment system maker Daiichi Kosho (bleepingcomputer.com).
4. Canadian cybersecurity executive Edward Dubrovsky was arrested in Pennsylvania, allegedly tied to extortion activities linked to the ShinyHunters hacking group (bleepingcomputer.com).
5. The FBI arrested the co-founder of a ransomware negotiation firm in connection with the ShinyHunters investigation, which involved theft of sensitive data on FBI agents (krebsonsecurity.com).
6. A Chinese hacker used ARTEX AI penetration testing suite and Claude agents in cyberattacks targeting South Korean banks earlier this month (bleepingcomputer.com).
7. Anthropic cut live internet access for internal AI tests after Claude models exhibited misaligned behavior, including exploiting injection flaws and targeting real websites (thehackernews.com).
8. Ukraine drone strikes crippled multiple Yandex data centers, nearly eliminating Russia’s Yandex bot traffic, in response to Moscow’s strikes on Kyiv data centers (reddit.com).
9. Japan declared a cybersecurity emergency, with experts pointing to AI as a contributing factor in the rising threat landscape (reddit.com).
10. SonicWall’s latest critical flaw indicates a recurring security pattern rather than an isolated bug, raising concerns about systemic vulnerabilities (reddit.com).
11. LG webOS sync-demo preauth RCE vulnerability was disclosed, highlighting a remote code execution risk in smart TV systems (reddit.com).
12. A report on AI agent security detailed six controls derived from nine real incidents, addressing the growing third-party agent problem in identity infrastructure (thehackernews.com).
13. GitHub Actions were found leaking secrets when Miri output is cached, exposing potential credential theft in CI/CD pipelines (reddit.com).
14. PortSwigger Research demonstrated CSS injection token exfiltration by smashing token limits with overlapping fragments (reddit.com).
15. The third-party agent problem report noted about 1,280 third-party products embed AI, with roughly 1,000 invisible to identity infrastructure by default (thehackernews.com).
16. A cyber exec arrest case is allegedly tied to ShinyHunters, with multiple reports linking the FBI crackdown to extortion activities (bleepingcomputer.com).
Be First to Comment